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AMENDMENT UNDER 37 C.F.R. 1.3 12 

Amendments to the Claims 

This listing of claims will replace all prior versions, and listings, of claims in the 
application: 

Listing of Claims 

1 . (Currently Amended) In a syst e m A method for performing an action, in response to an 
electronic communication regarding an account, which electronic communication is received 
from a sender by a receiver, [[a]] tiie method comprising: compri s ing the steps of: 

(a) initially, associating by ihe receiver, sender identity information and a public key of a 
public-private key pair with the account such that the public key is retrievable based on the 
sender identity information, wherein the account comprises entity information, and wherein the 
public key is associated with the account in a computer database; and thereafter 

(b) receiving the electronic communication from the sender, 

(i) wherein the electronic communication was created after the association of the 
sender identity information and the public key with the account, account in step (a), 

(ii) wherein the electronic communication comprises, 

(A) the sender identit)' information, and 

(B) a digital signature derived from an electronic message using the 
private key of the pair from an electronic message possessed first by the sender before the 
receiver, the sender identity information being different from the electronic message, and 

(iii) wherein the electronic communication is communicated electronically from 

the sender; and 

(c) validating the identity of the sender for the electronic communication by only: only 
performing th e st e ps of, 

(i) utilizing the sender identit>' information received in the electronic 
communication to retrieve the public key based on the association of the sender identity 
information and the public key with the account, account p e rform e d in st e p (a), and 
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(ii) comparing a function of the public key and the digital signature with a 
function of the electronic message, wherein the fiinction of the public key and the digital 
signature comprises decrypting the digital signature using the public key, whereby a comparison 
resulting in a match validates the identity of the sender, 

2. (Currently Amended) In a s y s tem A method for performing an action, in response to an 
electronic communication regarding an account, which electronic communication is received 
from a sender by a receiver, [[a]] the method comprising: comprising th e st e ps of: 

(a) initially, associating by the receiver, sender identity information and a public key of a 
public-private key pair with the account such that the public key is retrievable based on the 
sender identity information, wherein the account comprises entity information, and wherein the 
public key is associated with the account in a computer database; and thereafter 

(b) receiving the electronic communication from the sender, 

(i) wherein the electronic communication was created after the association of the 
sender identity information and the public key with the account, account in step (a), 

(ii) wherein the electronic communication comprises, 

(A) the sender identity information, and 

(B) a digital signature derived from an electronic message using the 
private key of the pair from an electronic message possessed first by the sender before the 
receiver, the sender identity information being different from the electronic message, and 

(iii) wherein the electronic communication is communicated electronically from 
the sender; and 

(c) validating the identity of the sender for the electronic communication by, 

(i) utilizing the sender identity information received in the electronic 

communication to retrieve the public key based on the association of the sender identity 
information and the public key with the account, account porform o d in st e p (a), and 

(ii) comparing a function of the public key and the digital signature with a 
function of the electronic message, wherein the fimction of the public key and the digital 
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signature comprises decrypting the digital signature using the public key, whereby a comparison 
resuhing in a match validates the identity of the sender, and wherein neither a PIN nor a 
password is required to be transmitted to the receiver for validating the identity of the sender. 

3. (Currently Amended) In a systom A method for performing an action, in response to an 
electronic communication regarding an account, which electronic communication is received 
from a sender by a receiver, [[a]] the method comprising: oomprising tho stops of: 

(a) initially, associating by the receiver, sender identity information and a public key of a 
public-private key pair with the account such that the public key is retrievable based on the 
sender identity information, wherein the account comprises entity information and the sender 
identity information comprises other than an account number, and wherein the public key is 
associated with the account in a computer database; and thereafter 

(b) receiving the electronic communication from the sender, 

(i) wherein the electronic communication was created after the association of the 
sender identity information and the public key with the account. acoount - in -s t e p -( a ); 

(ii) wherein the electronic communication comprises, 

(A) the sender identity information, and 

(B) a digital signature derived from an electronic message using the 
private key of the pair from an electronic message possessed first by the sender before the 
receiver, the sender identity information being different from the electronic message, and 

(iii) wherein the electronic commimication is communicated elecfronically from 
the sender; and 

(c) validating the identity of the sender for the electronic communication by, 

(i) utilizing the sender identity mformation received in the electronic 
communication to retrieve the public key based on the association of the sender identity 
information and the public key with the account, account p e rformed in step (a), and 

(ii) comparing a ftinction of the public key and the digital signature with a 
function of the electronic message, wherein the ftinction of the public key and the digital 
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signature comprises decrypting the digital signature using the public key, whereby a comparison 
resulting in a match validates the identity of the sender. 

4. (Currently Amended) In a syst e m A method for performing an action, in response to an 
electronic communication regarding an account, which electronic communication is received 
from a sender by a receiver, [[a]] the method comprising: comprising the step s of: 

(a) initially, associating by the receiver, sender identity information and a public key of a 
public-private key pair with the account such that the public key is retrievable based on the 
sender identity information, whereui the account comprises entity information, and wherein the 
public key is associated with the account in a computer database; and thereafter 

(b) receiving the electronic communication from the sender, 

(i) wherein the electronic communication was created after the association of the 
sender identity information and the public key with the account, account in step (a), 

(ii) wherein the electronic communication comprises, 

(A) the sender identity information, and 

(B) a digital signature derived from an electronic message using the 
private key of the pair from an electronic message possessed first by the sender before the 
receiver, the sender identity information being different from the electronic message, 

(iii) wherein the electronic communication is communicated electronically from 
the sender, and (iv) wherein the electronic communication is the only electronic communication 
received from the sender by the receiver relating to the action; and 

(c) validating the identity of the sender for the electronic communication by, 

(i) utilizing the sender identity information received in the electronic 
communication to retrieve the public key based on the association of the sender identity 
information and the public key with the account, account p e rformed in - st e p (a), and 

(ii) comparing a function of the public key and the digital signature with a 
function of the electronic message, wherein the fimction of the public key and the digital 
signature comprises decrypting the digital signature using the public key, whereby a comparison 
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resulting in a match validates the identity of the sender, 

5. (Original) The method of claims 1, 2, 3, or 4, wherein the electronic communication 
includes the electronic message. 

6. (Original) The method of claims 1, 2, 3, or 4, wherem the electronic message is implied 
from the receipt of the electronic communication. 

7. (Original) The method of claims 1, 2, 3, or 4, wherein the digital signature is derived 
within a smart card of the sender. 

8. (Original) The method of claims 1, 2, 3, or 4, wherein the digital signature is received 
from the sender within a terminal of a third-party and then forwarded to the receiver. 

9. (Original) The method of claums 1, 2, 3, or 4, wherein the electronic communication is 
received over a secure network. 

10. (Original) The method of claims 1, 2, 3, or 4, wherein the electronic communication is 
received over an insecure network. 

1 1 . (Original) The method of claim 1 0, wherein the network comprises the Internet. 

12. (Original) The method of claims 1, 2, 3, or 4, wherein the electronic commimication is 
received encrypted. 

13. (Original) The method of claims 1, 2, 3, or 4, wherein the electronic communication is 
received unencrypted. 
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14. (Original) The method of claims 1, 2, 3, or 4, wherein the receiver is a financial 
institution and the action on the accovint comprises a financial transaction. 

1 5 . (Original) The method of claims 1 , 2, 3, or 4, wherein the electronic communication 
includes the public key. 

1 6. (Original) The method of claims 1 , 2, or 4, wherein the sender identity information 
comprises the account number. 

1 7. (Original) The method of claims 1 , 2, or 4, wherein the sender identity information 
comprises other than the account number. 

18. (Original) The method of claims 1, 2, 3, or 4, wherein the public key was associated with 
the account when the account was first established. 

1 9. (Original) The method of claim 1 8, wherein the public key was provided by the sender to 
the receiver. 

20. (Original) The method of claim 1 8, wherein the public key was provided to the sender by 
the receiver. 

2 1 . (Original) The method of claims 1 , 2, 3, or 4, wherein the entity information includes 
information required to process the action. 

22. (Original) The method of claims 1, 2, 3, or 4, wherein the entity information comprises a 
personal identification number (PIN). 

23. (Original) The method of claims 1, 2, 3, or 4, wherein the entity information comprises 
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information validated when the account was established. 

24. (Original) The method of claims 1 , 2, 3, or 4, wherein the entity information comprises 
information that was validated in a face-to-face acknowledgement between the sender and the 
receiver. 

25. (Original) The method of claims 1 , 2, 3, or 4, wherein the entity information comprises 
the social security number of the sender. 

26. (Original) The method of claims 1, 2, 3, or 4, wherein the entity information comprises 
the address of the sender. 

27. (Original) The method of claims 1, 2, 3, or 4, wherein the entity information comprises 
the mother's maiden name of the sender. 

28. (Original) The method of claims 1 , 2, 3, or 4, wherein the entity information is part of 
transactional account information that is associated with the public key of the sender in the 
computer database. 

29. (Original) The method of claim 28, wherem the transactional account information 
comprises business process information. 

30. (Original) The method of claim 28, wherein the transactional account information 
comprises a history of ledger transactions in the account. 

3 1 . (Original) The method of claim 28, wherein the account comprises a checking account. 

32. (Original) The method of claims 1, 2, 3, or 4, wherein the entity information is stored in 
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fields in records in a computer database. 

33. (Original) The method of claim 32, wherein the records comprise an account file. 

34. (Original) The method of claim 32, wherein the records further comprise a transactions 
file. 

35. (Original) The method of claims 1 , 2, 3, or 4, wherein the digital signature is derived 
within a hand-held device of the sender. 

36. (Original) The method of claims 1 , 2, 3, or 4, wherein the entity information comprises 
personal information of the sender. 

37. (Original) The method of claims 1 , 2, 3, or 4, wherein the fiuiction of the electronic 
message comprises applying a hashing algorithm to the electronic message. 
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